Important information and who we are

Soldly is an AI platform for call analytics and sales quality control, owned and operated by SOLDLY AI LTD. When you use Soldly, you interact with services provided by SOLDLY AI LTD.

In this privacy policy, references to "Soldly", the "platform" or the "service" mean the product and services provided by SOLDLY AI LTD. References to the "Company", "we", "us" or "our" mean SOLDLY AI LTD as the legal entity that owns and operates Soldly.

Privacy policy

This privacy policy explains how SOLDLY AI LTD (through the Soldly platform) collects and uses your personal data through your use of this website, including any data you provide when you register with us or purchase a service.

This website is not intended for children, and we do not knowingly collect data relating to children.

Data controller

SOLDLY AI LTD is the controller and is responsible for your personal data. SOLDLY AI LTD owns the Soldly platform and is responsible for this website (soldly.ai).

This privacy policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data (Use and Access) Act 2025.

The types of personal data we collect about you

Personal data means any information about an individual from which that person can be identified.

We may collect, use, store and transfer different kinds of personal data about you, which we have grouped as follows:

• Identity data — first name, last name, username or similar identifier, job title, date of birth and gender.
• Contact data — billing address, delivery address, email address and telephone numbers.
• Call data — call audio recordings, transcripts, AI analysis results, quality scores and call metadata (duration, time, phone numbers).
• Financial data — bank account and payment card details.
• Transaction data — details of payments to and from you and other details of products and services you have purchased from us.
• Technical data — IP address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device identifier and other technology on the devices you use to access this website.
• Profile data — your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
• Usage data — information about how you interact with and use our website, products, services and other platform features.
• Marketing and communications data — your preferences in receiving marketing from us and third parties and your communication preferences.

How your personal data is collected

We use different methods to collect data from and about you, including:

Direct interactions

You may give us your personal data by filling in online forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:

• apply for our products or services;
• create an account on our website;
• subscribe to our service or publications;
• request marketing to be sent to you;
• give us feedback or contact us.

Automated technologies or interactions

As you interact with our website, we automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies.

Third parties or publicly available sources

We receive personal data about you from various third parties and public sources, including:

• technical data from analytics providers such as Google;
• contact, financial and transaction data from providers of technical, payment and delivery services;
• call data from integrated telephony systems (Binotel, Ringostat, UniTalk, Phonet and others);
• calendar and email data from your Google account, only if you choose to connect it (see "Use of Google user data" below).

How we use your personal data

Legal basis

The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following:

• Performance of a contract with you: where we need to perform the contract we are about to enter into or have entered into with you.
• Legitimate interests: where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and to give you the best and most secure customer experience.
• Legal obligation: where we need to comply with a legal obligation that we are subject to.
• Consent: we rely on consent only where we have obtained your active agreement to use your personal data for a specific purpose.

Purposes for which we use your personal data

We use your personal data for the following purposes:

• to register you as a new customer or user;
• to process and deliver your orders, including managing payments and charges;
• to provide automated support through AI features, including call transcription, AI analysis and recommendations;
• to manage our relationship with you, including notifying you about changes to our terms or privacy policy;
• to administer and protect our business and this website;
• to deliver relevant website content and online advertising (this never uses Google user data — see below);
• to use data analytics to improve our website, products and services, customer relationships and experiences.

Direct marketing

You will receive marketing communications from us if you have requested information from us or purchased goods or services from us and you have not opted out of receiving that marketing.

Opting out

You can ask us to stop sending you marketing messages at any time by logging into the website and adjusting your marketing preferences or by contacting us at info@soldly.ai.

Disclosures of your personal data

We may share your personal data, where necessary, with the following parties:

• IT and hosting infrastructure providers (for example Amazon Web Services, Supabase);
• payment service providers (Stripe);
• AI service providers;
• integrated telephony systems and CRMs;
• authentication and calendar/email connectivity provider (Nylas) and meeting recording provider (Recall.ai), only for users who connect these features;
• professional advisers including lawyers, bankers, auditors and insurers;
• law enforcement or regulatory bodies where required by law.

Use of Google user data (Google Calendar and Gmail)

If you connect your Google account to Soldly, we access only the data you explicitly authorise on the Google consent screen, and we use it solely to provide the features you have chosen to enable:

• Google Calendar — we read the events in your calendar to show your upcoming meetings in Soldly and, if you enable auto-record, to have Soldly's AI notetaker join the video meetings in those events (Google Meet, Zoom, Microsoft Teams) to record, transcribe and analyse them. Events are created, updated or deleted only as a result of your own action in Soldly (for example, scheduling a meeting with a lead).
• Gmail — we read and send email on your behalf only within the customer conversations you manage through Soldly.

What we store

For calendar: event title, start and end time, attendees and the video-conference link. For email: the messages of the conversations you open in Soldly. OAuth access tokens are held by our authentication provider Nylas; Soldly stores only an account identifier. All data is encrypted in transit (TLS) and stored in access-controlled cloud databases.

Limited Use

Soldly's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• we use Google user data only to provide and improve the user-facing features described above;
• we do not sell Google user data and do not transfer it to third parties except as necessary to provide these features (Nylas for authentication and connectivity, Recall.ai for meeting recording, our cloud database provider), to comply with applicable law, or as part of a merger or acquisition with notice to you;
• we do not use Google user data for advertising, including retargeting or interest-based advertising;
• we do not use Google user data to develop, improve or train generalised AI or machine-learning models;
• no human at Soldly reads your Google user data unless you give us explicit permission (for example for support), it is necessary for security purposes such as investigating abuse, it is required to comply with law, or the data is aggregated and anonymised for internal operations.

Retention, revocation and deletion

Google user data is kept only while your Google account is connected. You can disconnect it at any time in Soldly (Meetings → Calendar, or Settings → Integrations) or revoke Soldly's access on your Google Account permissions page. After disconnection we stop receiving data from Google, and stored events and messages are deleted within 30 days or sooner on request to info@soldly.ai.

Use of Meta data (Facebook, Instagram and WhatsApp)

A business that uses Soldly can connect its Facebook Page, Instagram professional account or WhatsApp Business number. We access only the data that the business authorises in the Meta login dialog, and we use it solely to let the business's team read and answer customer messages inside Soldly:

• Facebook Pages (Messenger) — the list of Pages you manage (so you can choose which one to connect), a webhook subscription for that Page, and the Messenger conversations of that Page, which we display in the Soldly inbox and use to send the replies your team writes.
• Instagram — the basic profile of the connected professional account (ID, username, profile picture) and its Direct messages, which we display in the Soldly inbox and use to send your team's replies.
• WhatsApp Business — the WhatsApp Business account and phone number you select, and the messages sent to and from that number, which we display in the Soldly inbox and use to send your team's replies.

What we store and how we use it

We store the connected account or Page identifier and name, the access token issued by Meta (encrypted in our cloud database), and the conversations received through the connected channel: sender name and ID, message text, attachments and timestamps. If the business enables AI conversation analysis, message text is processed by our AI provider to produce summaries and quality scores for that business only. We do not sell Meta data, do not use it for advertising, do not share it with data brokers and do not use it to train generalised AI models. Each business sees only the conversations of the accounts it has connected.

Retention, disconnection and deletion

Meta data is kept while the channel is connected and for as long as the business keeps its Soldly account. You can disconnect a channel at any time in Soldly (Settings → Integrations) or remove Soldly in your Facebook or Instagram settings (Business Integrations / Apps and Websites). When Meta notifies us that the app was removed or a deletion was requested, we revoke the stored access token immediately and delete the related data within 30 days. Instructions and status of a deletion request are available on our data deletion page; you can also email info@soldly.ai.

Data security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

Data retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

By law we have to keep basic information about our customers (including contact, identity, financial and transaction data) for six years after they cease being customers for tax purposes.

In some circumstances you can ask us to delete your data, as described below.

Your legal rights

You have a number of rights under data protection law in relation to your personal data. You have the right to:

• Request access to your personal data (a "data subject access request"), which lets you receive a copy of the personal data we hold about you.
• Request correction of the personal data we hold about you, so that any incomplete or inaccurate data is corrected.
• Request erasure of your personal data in certain circumstances, where there is no good reason for us to continue processing it.
• Object to processing of your personal data where we rely on legitimate interest as the legal basis.
• Request the transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format.
• Withdraw consent at any time where we rely on consent to process your personal data.
• Request restriction of processing of your personal data in certain circumstances.

If you wish to exercise any of the rights set out above, please contact us at info@soldly.ai.

No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive, or refuse to comply with your request in these circumstances.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it may take longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Contact details

If you have any questions about this privacy policy or our privacy practices, or wish to exercise your rights, please contact us:

• Company: SOLDLY AI LTD
• Email: info@soldly.ai
• Postal address: 84 Basement Flat London Road, London, England, SE23 3PA

Complaints

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).

We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

Changes to the privacy policy

We keep our privacy policy under regular review.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Third-party links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.